Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2f58-3p8j-4mx4

Опубликовано: 20 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches

EPSS

Процентиль: 26%
0.00093
Низкий

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 3 лет назад

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches

CVSS3: 7.1
nvd
больше 3 лет назад

Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches

CVSS3: 7.1
debian
больше 3 лет назад

Improper access control in the CI/CD cache mechanism in GitLab CE/EE a ...

EPSS

Процентиль: 26%
0.00093
Низкий

8.8 High

CVSS3

Дефекты

CWE-863